CLAIMS 



1. An improved personal device to be connected to a terminal for establishing a trustworthy 
connection between a user via said device and said terminal which is connected to and 
authenticatable by at least one server, the improvement comprising at least one storage 
component for storing predetermined authentication information (vec) conmiunicatable to 
the terminal for said terminal to create an authenticity output message. 

2. An improved perspnal device to be connected to a terminal for establishing a trustworthy 
connection between a user via said device and said terminal which is connected to and 



authenticatable by 
authentication 



at least one server, the improvement comprising at least one device 
coniponent for said device to authenticate itself to the terminal. 



3. An improved 
connection betweeh 



perscjnal device to be connected to a terminal for establishing a trustworthy 
a user via said device and said terminal which is connected to and 



authenticatable by at least one server, the improvement comprising messaging component 



for requesting user 



authentication information from the user and a comparison component 



for verifying the authenticity of the user authentication information. 



4. The improved 

message (mo) comprises 



perjional device, according to claim 1, wherein the authenticity output 
ises at least one of visible, audible and tactile information. 



5. The improved 
message (nio) 



personal device, according to claim 1, wherein the authenticity output 
composes at least one value for lookup in a table stored in the terminal. 
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6. A terminal for establishing a trustworthy connection between a user and a server, the 
terminal comprising: 1 

a device input compdnent for input of a user device; 

a communication component for establishing and conducting communications with a 
server and for receiving at least one authenticity output message from said server; and 

at least one message ojutput component for outputting the at least one authenticity output 
message to the user. 

7. The terminal according to claim 6 further comprising at least one user input interface 
component for receiving user input. 

8. The terminal according to claim 6 further comprising a stored lookup table which is 
accessible via the authenticity output message. 

9. A server being equipped for establishing a trustworthy connection between a user and a 
termmal via a user input device comprising: 

a communication component for estabUshing and conducting communications with the 
terminal; 



receiver means for receiving at least one authentication request from said terminal; 



at least one authenticatic n component for verifying the authenticity of the terminal; and 
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a message generation component for generating at least one authenticity output message 
for delivery to said user at said terminal. 

10. The server according to claim 9 fiirther comprising a session key creation component for 
creating a session key to be communicated to said terminal. 

11. The server accordirm to claim 9 further comprising at least one storage location for 
storing at least one user-specific authenticity output message and wherein said message 



generation componen 
message for display to 



12. A method for establish ng a trustworthy connection between a user via said personal device 

s connected to and authenticatable by at least one server which is 
device, comprising: 



and a terminal which 



authenticatable by said 



said server authenticating said terminal; 



estabUshing a second 



accesses the stored at least one user-specific authenticity output 
the user at said terminal. 



estabUshing a first authenticated trusted connection upon success of said authenticating; 



said server authenticat ing itself to said device; 



Imsted connection between said server and said device; and 



said server providing a terminal authenticity message via said established second trusted 
connection confirming! the established authenticity of said terminal; 
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13. The method acdording to claim 12 further comprising communicating said terminal 
authenticity message Ho said user. 

14. The method according to claim 13 wherein said communicating comprises displaying 



said message by saic 



<ievice. 



information (vec) is 
authenticity output 



15. The method acco rding to claim 13 wherein said communicating comprises displaying 
said message by said terminal. 

16. The method according to claim 12 wherein said providing a terminal authenticity 
message composes acjcessing at least one stored user-specific message, 

17. The method accbrding to claim 12 wherein said providing a terminal authenticity 
message compnses e>:changing a predetermined set of messages with said user. 



18. The method acbording to claim 15 wherein stored predetermined authentication 
communicated fi-om the device to the terminal for creating there an 
n essage (mo). 



19. The method, acqording to claim 12 further comprising the device authenticating itself 
to the terminal. 

20. The method according to claim 12 further comprising the device requesting that the 
user authenticate hiipself 

21. The method accjording to claim 14 wherein the device outputs the terminal authenticity 
message including alt least one of visible, audible and tactile information. 
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22. The method according to claim 15 wherein the terminal outputs the terminal 
authenticity message including at least one of visible, audible and tactile information 

23. The method accorfling to claim 21 wherein the message is output only partially by the 
device, according to a preselection by the user. 

24. The method according to claim 21 wherein the message is output only partially by the 
terminal according to a preselection by the user 

25. The method accprding to claim 12 further comprising authenticating the device to the 
server. 

26. The method according to claim 12 further comprising authenticating the user. 

27. A method for/a server to establish a trustworthy connection to a user from a terminal 
comprising the stieps of 

receiving input pom a terminal at which said user is accessing said server; 

authenticating the terminal; and 

generating a terminal authenticity message to said user. 



28. The method according to claim 27 wherein said generating comprises accessing at least 
one stored message. 
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29. The method according to claim 28 wherein said generating comprises performing an 
exchange of messages with said user according to a stored authenticity message. 

30. A program storage device readable by machine, tangibly embodying a program of 
instructions executablelby the machine to perform method steps for a server to establish a 
trustworthy connection With a user via a terminal, said method steps comprising: 

receiving input from a terminal at which said user is accessing said server; 

authenticating the terminal; and 

generating a terminal authenticity message to said user. 
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